Ultimate Store Kit Elementor Addons vulnerabilities

Product

Ultimate Store Kit Elementor Addons

by bdthemes · last CVE Aug 6, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 1High 0Medium 10Low 0

Severity

All severities11 Critical1 High0 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Ultimate Store Kit Elementor Addons to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-25403	6.5	0%	Aug 6	WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability Affected: through 3.0.5
CVE-2026-65503	6.5	0%	Jul 23	WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability Affected: through 3.0.5
CVE-2025-58017	6.5	0%	Sep 22	WordPress Ultimate Store Kit Elementor Addons plugin <= 2.8.6 - Cross Site Scripting (XSS) vulnerability Affected: through 2.8.6
CVE-2025-32184	6.5	0%	Apr 4	WordPress Ultimate Store Kit Elementor Addons plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability Affected: through 2.5.0
CVE-2024-47629	6.5	0%	Oct 5	WordPress Ultimate Store Kit Elementor Addons plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability Affected: through 2.0.5
CVE-2024-43342	5.4	0%	Aug 18	WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability Affected: through 1.6.4
CVE-2024-4606	5.4	0%	May 9	WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder plugin <= 2.0.3 - PHP Object Injection vulnerability Affected: through 2.0.3
CVE-2026-65505	5.3	0%	Jul 23	WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Sensitive Data Exposure vulnerability Affected: through 3.0.5
CVE-2025-69336	4.3	0%	Jan 6	WordPress Ultimate Store Kit Elementor Addons plugin <= 2.9.4 - Broken Access Control vulnerability Affected: through 2.9.4
CVE-2025-24584	4.3	0%	Jan 27	WordPress Ultimate Store Kit Elementor Addons plugin <= 2.3.0 - Broken Access Control vulnerability Affected: through 2.3.0